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Information  Warfare  is  a  hot  topic  throughout  the  Department  of  Defense  today,  and  a 
debate  rages  about  what  it  really  is,  who  the  warfighters  are,  and  what  its  impact  will  be  on 
warfare  in  the  future.  This  study  defines  key  concepts  of  information  warfare,  examines  its 
offensive  and  defensive  components,  and  compares  information  warfare  to  a  previous 
technological  revolution,  air  warfare.  The  paper  draws  on  a  broad  spectrum  of  resources  from 
military,  philosophy,  business,  and  computer-oriented  perspectives.  It  examines  opportunities 
and  potential  pitfalls  in  the  conduct  of  offensive  and  defensive  information  warfare,  the 
desirability  and  feasibility  of  using  information  warfare  weapons  and  techniques,  and 
concludes  with  precautionary  caveats  about  vulnerabilities,  expectations,  and  applicability. 


WHAT  IS  THE  INFORMATION  WAR? 


Introduction 

"We  must,  above  all,  win  the  information  war!"'  These  words  have  become  a 
battle  cry  for  the  U.  S.  Army.  General  Gordon  Sullivan  brought  the  phrase  into  the 
Army's  lexicon,  and  a  change  of  Army  leadership  has  only  intensified  what  General 
Sullivan  started.  His  successor  as  Chief  of  Staff,  General  Dennis  Reimer,  lists  "win 
the  information  war"  as  one  of  his  top  priorities  as  well.  The  message  is  clear:  a  key 
to  future  victory  is  digitizing  the  battlefield,  and  we  see  enormous  effort  and  resources 
applied  to  Force  XXI  and  the  Experimental  Force  (EXFOR).^  Information  warfare  is 
a  hot  topic,  and  not  only  in  the  US  Army.  Other  services  are  following  parallel  paths, 
and  if  anything  are  even  more  enthusiastic  and  determined.  Predictably,  each  service 
has  its  own  ideas  about  service  contributions  to  the  Information  War.  Information 
warfare  (IW)  is  now  listed  as  part  of  the  1995  National  Military  Strategy,  in  the  "Fight 
and  Win"  colunm.^  This  is  serious  business,  and  it  will  certainly  be  JOINT  business. 
But  is  information  warfare  really  feasible?  What  about  the  desirability  of  IW?  Is  it 
more  desirable  than  traditional  physical  combat?  In  this  paper,  we  will  see  that  IW  is 
not  only  feasible,  it  has  become  an  integral  part  of  modem  warfare.  We  will  answer 


the  question  of  desirability  as  well,  and  identify  some  important  caveats  that  qualify 
the  conclusion. 


Bacl^ound 

Futurists  tell  us  we  are  entering  the  "third  wave."  The  agrarian  era  is  behind 
us,  and  we  are  witnessing  the  transition  from  an  industrial  age  to  an  information  age. 
We  stand  on  the  threshold  of  an  era  when  information  is  the  product,  and  information 
itself  constitutes  both  wealth  and  power."*  If  information  is  power,  or  the  possession  of 
information  confers  power,  it  follows  logically  that  this  power  might  also  be  used  as  a 
weapon,  just  as  the  power  of  gunpowder  and  the  internal  combustion  engine  were 
harnessed,  and  became  powerful  weapons  of  warfare.^ 

Then  again,  neither  gunpowder  nor  the  internal  combustion  engine  were 
weapons  of  war  in  and  of  themselves.  To  be  sure,  they  were  key  technology 
breakthroughs  in  the  development  of  the  modem  machines  of  war.  These  machines 
gave  their  owners  tactical,  operational,  and  strategic  advantages  against  their  enemies. 
But  to  contribute  to  the  battle,  these  technological  marvels  had  to  be  weaponized, 
aimed,  and  operated  with  great  skill.  Despite  repeated  predictions  to  the  contrary,  no 
technological  irmovation  has  replaced  the  warrior.  Technology  has  often  changed  the 
arms  and  armor,  and  even  the  medium  of  battle.  The  fighter  pilot  in  his  sleek,  high- 
tech  war  machine  is  a  far  cry  from  the  grunt  in  a  foxhole,  but  he  is  no  less  a  warrior, 
and  few  would  argue  that  both  are  still  absolutely  indispensable  on  the  modem 
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battlefield.  Will  the  information  war  change  these  facts,  or  will  it  simply  alter  the 
equation? 

First,  however  a  short  discussion  of  "information"  is  in  order.  Understanding 
and  agreeing  upon  a  hierarchy  of  data,  information,  and  knowledge  will  help  clarify 
the  discussion.  Information,  in  and  of  itself,  is  worthless.  Information  only  becomes 
valuable  when  it  increases  knowledge,  and  that  knowledge  is  used  with  wisdom. 
Figure  1  provides  an  illustration  of  the  hierarchy  of  information.®  Data  provided  by  a 
variety  of  sensors  is  the  lowest  form,  and  must  be  collected  to  reveal  patterns  of 
discemable  information.  The  information  is  analyzed  to  produce  knowledge  of  an 


Figure  1  Hierarchy  of  Data/Information/Knowledge 
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event,  area,  or  situation.  Finally,  synthesis  of  knowledge  shoxild  produce  wisdom,  the 
appropriate  use  of  knowledge  in  action.  Despite  the  value  added  at  each  level  of  the 
hierarchy,  knowledge  is  valueless  unless  it  is  used  with  wisdom.  Notice  also  that 
communication  is  the  "mortar"  holding  this  pyramid  together.  In  virtually  every 
discussion  of  Information  Warfare,  regardless  of  means,  the  goal  is  twofold  and 
complementary:  1)  increase  the  situational  awareness  of  friendly  forces  (especially 
leaders),  and  2)  disrupt  or  destroy  the  situational  awareness  of  the  enemy. 

Definitions 

If  we  are  to  discuss  this  subject,  it  is  essential  to  first  agree  on  a  common  set 
of  definitions.  At  the  moment,  many  doctrinal  publications  are  still  in  draft  or  review 
form.  We  haven't  quite  reached  a  consensus  about  what  the  information  war  really  is. 
For  the  purposes  of  this  paper,  at  least,  the  following  definitions  are  critical. 

What  is  the  Information  War? 

In  every  case,  the  common  thread  running  through  the  description  of  efforts  in 
the  information  war  is  an  effort  to  increase  or  decrease  the  situational  awareness  of 
someone,  usually  a  key  decision  maker.’  Typically,  the  commander  is  the  focus  of 
attention,  but  we  have  begun  to  realize  that  information  is  also  valuable  when  it  is  sent 
down  as  well  as  up,  and  that  lateral  transmission  of  information  on  the  battlefield  can 
increases  effectiveness  of  both  "shooters"  and  those  who  support  or  supply  the 
shooters.  Digital  technology  is  the  vehicle  that  is  allowing  great  strides  to  be  made. 
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replacing  voice  communication  with  digital,  using  electronically  generated  symbology, 
increasing  both  the  speed  of  transmission,  and  the  level  of  understanding  upon  receipt. 
We  can  say,  from  a  military  perspective  at  least,  that  the  information  war  is  an  effort 
to  increase  or  decrease  the  situational  awareness  of  warriors  on  the  battlefield, 
wherever  that  battlefield  may  be. 

So  What  Is  Information  Warfare? 

Information  warfare  consists  of  "actions  taken  to  achieve  information 
superiority  by  affecting  adversary  information,  information-based  processes,  and 
information  systems  while  defending  one's  own  information,  information-based 
processes,  and  information  systems."*  This  definition  brings  to  light  an  often- 
overlooked  but  critical  factor  in  discussions  of  IW;  it  consists  of  both  offensive  and 
defensive  components.  Offensive  information  warfare  (OIW)  seeks  to  disrupt  or  deny 
the  enemy  the  use  of  his  systems.  A  subset  of  OIW  is  Command  and  Control  Warfare 
(C2W),  in  which  the  object  of  operations  is  specifically  to  disrupt  or  deny  an 
adversary's  ability  to  exercise  command  and  control  of  his  forces.^  On  the  other  hand, 
defensive  information  warfare  (DIW)  seeks  to  preserve  our  ability  to  use  our  own 
information  systems.  Furthermore,  IW  operations  may  be  closely  related  to 
Intelligence  and  Electronic  Warfare  (lEW)  operations,  but  the  terms  are  not 
interchangeable,  in  either  the  offensive  (EW)  or  defensive  (intelligence/ 
counterintelligence)  context.  This  is  a  critical  conceptual  hurdle.  IW  may  be  a 
component  of  lEW,  or  vice  versa,  but  the  two  are  not  synonymous. We  will  discuss 
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the  characteristics  of  offensive  and  defensive  IW  operations  in  greater  detail  later  in 
this  paper. 


Cyberwar  and  Netwar 

In  a  recent  project  for  RAND,  John  Arquilla  and  David  Ronfeldt  present  two 
new  words  for  the  lexicon:  cyberwar  and  netwar."  According  to  Arquilla  and 
Ronfeldt,  cyberwar  is  a  component  of  "conventional"  military  contests;  that  part  of  the 
conflict  oriented  toward  collection,  analysis,  communication,  and  use  of  knowledge. 
Information  technology  is  a  component  of  cyberwar  in  that  it  makes  distribution  of 
information  possible,  but  the  second  order  effect  of  "networking"  is  at  least  as 
significant.  Arquilla  and  Ronfeldt  propose  that  the  hierarchical  structures  of  military 
systems  will  be  much  less  exclusive  than  today,  that  networks  will  often  replace 
hierarchies  in  conflict.  The  information  revolution  is  making  this  possible  by 
permitting  horizontal  distribution  of  information,  a  key  element  of  networks.  With 
possession  of  the  information,  and  its  accompanying  knowledge,  relatively  autonomous 
portions  of  the  network  will  be  able  to  do  the  right  thing,  not  only  responding  to 
situations,  but  anticipating,  and  acting  proactively,  without  orders  from  above.  At  the 
same  time,  because  of  the  rapid  transmission  of  information  up  the  chain  of  conunand, 
leaders  will  enjoy  greater  oversight  of  events. 

On  the  other  hand,  netwar  has  much  less  to  do  with  exploitation  or  destruction 
of  C3I  systems,  than  it  does  with  the  second  and  third  order  effects  of  the  information 
revolution.  Again,  electronic  networking  is  a  key  component.  The  important 
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distinction  between  netwar  and  cyberwar,  in  the  definitions  provided  by  Arquilla  and 
Ronfeldt,  is  that  cyberwar  is  part  of  a  military  operation  with  "conventional"  forces 

and  battles,  while  netwar  is  information  warfare  without  military  forces  or  physical 
battles. 


Information  Dominance 

Information  dominance  is  the  ultimate  objective  of  "the  information  war."  The 
purpose  of  IW,  whether  it  is  cyberwar  in  conjunction  with  conventional  forces,  or 
netwar  without  traditional  battle  is  to  thin  or  disperse  the  fog  of  war  for  us  and  our 
allies,  while  thickening  that  shroud  of  fog  around  our  enemies.  Neither  OIW  nor  DIW 
need  to  be  perfect  or  absolute.  The  goal  is  to  widen  the  knowledge  gap  between 
fnendly  and  enemy  forces  -  and  the  wider  the  better.  The  side  that  knows  more  will 
have  a  decided  advantage  over  its  adversary,  as  long  as  it  is  able  to  use  that 
knowledge. 
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OFFENSIVE  AND  DEFENSIVE  INFORMATION  WARFARE 


Information  Warfare  has  two  distinct  thrusts:  how  to  inflict  maximum  damage 
on  an  adversary,  and  how  to  prevent  being  the  victim  of  IW  attack.  What 
opportunities  and  pitfalls  does  IW  promise,  and  how  does  the  commander  fit  IW  into 
his  offensive  and  defensive  plans? 

Offensive  Information  Warfare 

This  is  the  area  where  we  have  seen  the  most  speculation  so  far,  and  the 
greatest  promise  for  maximum  gain  at  minimum  cost  -  the  war  in  cyberspace  -  "Let's 
cripple  the  enemy  before  he  has  an  opportunity  to  fire  a  shot."  Many  have  said  that 
the  Persian  Gulf  War  was  the  first  modem  information  war.'^  It  certainly  provides  an 
excellent  example  of  an  offensive  C2W  battle  as  an  integral,  essential  component  of 
the  overall  campaign  plan.  For  example,  one  of  the  new  weapons  first  tested  in 
combat  was  a  warhead  for  the  Tomahawk  cruise  missile  that  fed  out  carbon  fiber 
filaments  as  it  flew  over  electrical  distribution  facilities  to  short  them  out, 
subsequently  crippling  the  Iraqi  air  defense  system.  “*  The  central  telephone  exchange 
in  Baghdad  was  among  the  first  targets  engaged  in  the  air  campzugn.  But  even  before 
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the  telephone  exchange  was  attacked,  anti-aircraft  radars  were  targeted  and  eliminated 
by  Army  Apache  helicopters.'^  Each  of  these  events  was  part  of  the  integrated  plan  to 
sever  the  "head"  of  the  Iraqi  military  machine  from  its  "arms"-  disrupt  or  destroy  the 
system  of  command  and  control.  The  goal  was  to  blind  or  destroy  the  sensors, 
eliminating  the  acquisition  of  information;  and  disrupt  or  destroy  the  communications 
system,  preventing  the  transmission  of  information  upward  or  control  orders 
downward.  The  opening  shots,  indeed  major  portions  of  the  air  campaign,  were 
designed  to  deny  the  Iraqis  the  ability  to  gather  information  or  to  communicate 
information.  The  virtual  elimination  of  the  Iraqi  Air  Force  was  absolutely  critical,  in 
blinding  the  intelligence-gathering  capability  that  could  have  spoiled  the  element  of 
surprise  necessary  to  pull  off  the  "left  hook"  flanking  maneuver  that  General 
Schwarzkopf  referred  to  as  his  "Hail  Mary."  This  was  all  information  warfare,  but  it 
was  also  very  violent  and  physically  destructive,  a  far  cry  from  "netwar"  or  the 
"bloodless  war  of  cyberspace." 

Immediately  after  the  Persian  Gulf  conflict,  reports  of  cyberwar  directed  against 
the  Iraqis  began  to  appear.  Open-source  periodicals  reported  that  a  computer  virus 
was  injected  into  the  Iraqi  anti-aircraft  command  and  control  system  through  a 
computer  printer  that  was  delivered  sometime  between  the  invasion  and  liberation  of 
Kuwait.  According  to  the  report,  command  and  control  of  Iraqi  anti-aircraft  systems 
was  virtually  eliminated  by  the  virus,  before  the  coalition  air  campaign  began.  In 
retrospect,  the  report  appears  to  be  a  hoax.'^  Just  the  same,  it  highlights  a  serious 
problem  with  IW  in  support  of  combat  operations.  How  do  you  assess  battle  damage? 
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Theoretically,  if  you  can  functionally  destroy  or  sufficiently  disrupt  command, 
control,  and  communications,  physical  destruction  of  C3  assets  will  be  unnecessary. 
Furthermore,  if  you  can  sever  the  head  from  the  arms  by  isolating  the  leadership  from 
its  armed  forces,  you  may  obviate  the  need  to  engage  the  enemy's  armed  forces  in 
"real"  combat  at  all.  Still,  the  task  of  assessing  battle  damage  as  a  result  of  offensive 
cyberwar  attack  is  a  real  problem,  which  will  be  examined  more  closely  in  the  section 
covering  opportunities  and  pitfalls. 

At  the  tactical  and  operational  level,  we  already  possess  tools  to  conduct 
effective  offensive  IW.  Perhaps  surprisingly,  most  IW  tools  available  at  the  tactical 
and  operational  level  are  sophisticated  and  effective,  but  still  relatively  conventional. 
For  example,  cruise  missiles  or  laser  guided  bombs  delivered  by  stealth  aircraft  are 
tremendous  IW  weapons.  What  makes  them  IW  weapons  is  the  selection  of  the  target. 
The  thrust  of  offensive  IW  at  these  levels  of  warfare  is  also  a  relatively  conventional 
objective:  increase  the  fog  of  war  for  the  enemy. 

What  about  cyberwar?  Is  there  a  place  for  cyberwar  at  the  tactical  and 
operational  level?  Absolutely,  but  two  factors  stand  out.  First,  while  the  execution  of 
any  operation  is  a  tactical  event,  the  decision  to  inject  or  activate  disabling  software 
code  or  remotely  manipulate  data  is  likely  to  be  made  at  the  national  level,  and 
accomplished  with  strategic  assets.  Second,  because  the  effects  of  cyberwar  are  so 
difficult  to  assess,  targets  will  most  likely  be  struck  with  "hard  kill"  weapons  as  well, 
to  provide  a  comfortable  assurance  of  target  destruction.  If  destruction  of  those  targets 
is  made  less  costly  by  the  "cyberwar  prep,"  the  IW  efforts  were  well  spent. 
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Does  this  mean  that  IW  can  be  waged  with  both  conventional  and 
unconventional  weapons?  It  certainly  does.  IW  can  be  waged  by  targeting 
conventional  weapons  at  informational  targets,  by  launching  cyberweapons  such  as 
disabling  code  at  a  variety  of  informational  targets,  or  by  a  combination  of  the  two. 

the  hiture,  we  should  expect  to  see  the  combination  emerge  as  a  preferred  solution, 
to  capitalize  on  the  synergy  of  the  two  techniques. 

Defensive  Information  Warfare 

If  there  is  an  area  suffering  from  benign  neglect,  this  is  it.  Defensive 
operations  have  never  enjoyed  the  glamour,  the  esprit,  the  appeal  of  offensive 
operations,  and  the  same  attitude  is  equally  applicable  to  information  operations. 
Today,  at  least  within  the  U.S.  military,  even  defensive  operations  are  described  in 
terms  formerly  used  only  for  offensive  operations,  and  defense  is  often  seen  as  an 
unpleasant  necessity,  rather  then  "real"  warfare.”  Philosophically,  it  is  easy  to  lose 
sight  of  the  fact  that  successful  defense  is  absolutely  essential  to  victory  in  any 
conflict.  True,  defensive  operations  alone  will  not  win  a  war.  We  take  it  as  an 
obvious  truth  that  defensive  operations  are  to  be  followed  at  the  soonest  possible 
moment  by  offensive  operations,  leading  to  termination  of  hostilities  imder  conditions 
favorable  to  the  United  States.  At  the  same  time,  the  United  States  takes  pride  in 
maintaining  that  it  is  not  an  aggressor  nation,  that  it  does  not  start  wars.  This  position 
almost  guarantees  that  in  virtually  any  conflict.  United  States  forces  will  begin  fi-om  a 
defensive  posture,  until  sufficient  combat  power  is  built  up  to  launch  offensive 
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operations.  While  it  may  be  true  that  even  the  most  successful  defense  is  unlikely  to 
win  a  conflict,  it  is  also  just  as  true  that  an  unsuccessful  defense  can  make  subsequent 
operations  of  any  sort  difficult,  if  not  impossible. 

The  same  principles  are  true  in  information  warfare.  Successful  defensive 
information  warfare  is  essential  to  both  offensive  and  defensive  combat  operations. 
With  the  increasing  value  of  information  as  a  commodity,  protection  of  our  own 
information  resources  and  denial  of  those  same  resources  to  an  adversary  are  essential. 
We  are  still  faced  with  the  "glamour  problem"  -  it  is  much  more  exciting  to  inflict 
damage  on  another  than  to  prevent  damage  to  ourselves.  The  hackers  get  the 
headlines,  but  instances  of  successful  defense  of  data  resources  are  considered  "non¬ 
news."  Regardless,  what  are  the  specific  objectives  of  defensive  information  warfare 
and  how  can  we  achieve  them?  Here  are  three  key  components: 

1.  Protect  the  Friendly  Information  Architecture  From  Damage/Destruction 

Obviously,  we  want  to  be  able  to  use  our  own  information  system  for  the 
millions  of  tasks  and  transactions  it  supports,  from  ordering  replacement  parts  for 
combat  vehicles,  to  storing  and  communicating  operational  plans,  to  paying  the  forces 
in  the  field.  We  have  come  to  rely  on  our  information  systems  to  increase  efficiency, 
operational  tempo  and  lethality,  to  offset  the  reductions  in  sheer  numbers  of  forces. 

We  have  chosen  to  maintain  a  qualitative  edge  over  adversaries,  rather  than  a 
quantitative  superiority.  That  qualitative  edge  is  largely  dependent  on  the  ability  to 
process  information  at  a  pace  that  was  previously  considered  impossible.  While  the 
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individual  bits  of  hardware  are  often  the  focus  of  attention,  defending  the  mortar  that 
glues  the  structure  together  is  the  key  to  success.  (Refer  once  again  to  Figure  1,  on 
page  3.)  To  acquire  value,  information  must  not  only  be  collected,  it  must  be 
communicated.  Consequently,  to  protect  our  information  architecture,  we  must  not 
only  physically  protect  the  processors  from  damage  or  corruption,  we  must  protect  the 
means  of  communication  as  well.  An  interesting  dilemma  is  developing  in  the  area  of 
communications.  Increasingly,  U.S.  military  forces  are  relying  on  commercially 
available  communications  systems.  This  is  a  good  news/bad  news  story.  Lease  or 
purchase  of  commercial  communications  provides  capacity  at  relatively  low  cost.  At 
the  same  time,  however,  it  also  introduces  new  vulnerabilities.  First,  these  same  links 
are  available  to  anyone  with  the  money  to  purchase  the  services.  Furthermore,  they  do 
not  enjoy  the  same  sort  of  "hardening"  typical  of  tactical  military  systems.  Today, 
90%  of  DOD  communications  are  transmitted  over  commercial  systems.'* 

2.  Deny  Enemy  Intrusion  and  Access/Theft/Corruption. 

We  might  enjoy  the  advantage  of  a  truly  phenomenal  information  collection 
and  distribution  system,  but  if  our  system  is  an  open  book  to  an  adversary,  the  relative 
value  evaporates.  "Information  dominance"  is  the  key  term  here.  Our  systems  must 
be  secure  from  intrusion  that  would  allow  reading,  altering,  or  destroying  information 
we  possess.  This  is  not  simply  a  battlefield  problem.  There  is  also  an  even  more 
basic,  fundamental  level  of  defense  -  a  pressing  need  for  information  to  be  secure  at 
its  source.  For  example,  what  value  is  a  replacement  part  for  an  aircraft  if  a  design 
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flaw  was  surreptitiously  inserted  into  the  technical  data  package,  that  would  virtually 
insure  catastrophic  failure  within  ten  hours  of  operation?  Very  quickly,  we  see  that 
defensive  information  operations  are  a  challenge  that  reach  all  the  way  back  to  the 
industrial  base,  not  just  the  combat  forces  in  the  field. 

3.  Deny  enemy  knowledge  by  passive  means 
Passive  defense  is  the  least  glamorous  task  of  all,  yet  it  may  also  be  the  most 
effective.  Simply  stated,  we  must  ensure  we  do  not  broadcast  information  to  an 
adversary,  or  allow  him  to  gather  worthwhile  information  by  observation.  Adherence 
to  rules  for  handling  classified  information,  and  good  operations  security  (OPSEC)  will 
prevent  adversary  collection  of  information  "the  easy  way." 

Relevance  to  the  Commander 

The  important  concept  to  recognize  is  that  information  warfare  consists  of  both 
offensive  and  defensive  aspects.  While  we  certainly  want  to  pursue  the  capability  to 
wage  offensive  information  operations,  we  must  keep  part  of  our  attention  focused  on 
the  defensive  portion  as  well.  The  potential  advantages  to  be  gained  through  the  use 
of  OIW  are  matched  and  even  exceeded  by  unsuccessful  DIW.  While  high  tech 
intrusions  get  the  headlines,  the  highest  payoff  in  DIW  still  comes  from  attention  to 
detail  in  following  familiar  physical  security  and  information  security  procedures,  and 
old-fashioned  OPSEC.*®’^® 
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A  LESSON  FROM  fflSTORY: 


THE  UNFULFILLED  PROMISE  OF  STRATEGIC  BOMBING 

Since  the  invention  of  the  airplane,  proponents  of  airpower  have  maintained 
that  the  airplane  has  fundamentally  changed  the  nature  of  war?'  If  we  examine  this 
claim  dispassionately,  we  see  that  it  has  some  elements  of  truth,  and  some  unfulfilled 
promises  as  well.  For  example,  while  dominance  in  the  aerial  dimension  of  warfare  is 
an  essential  for  success  on  the  surface,  employment  of  air  forces  has  not  eliminated 
the  function  of  surface  forces  on  land  or  at  sea.  The  greatest  successes  in  modern 
combat  have  been  achieved  by  the  integration  of  air,  sea,  and  land  forces,  capitalizing 
on  the  synergy  of  the  combination.  Those  who  have  advocated  "winning  the  war" 
with  strategic  bombing  alone  have  invariably  been  disappointed,  or  forced  to  present 
specious  arguments  after  the  fact,  that  they  weren't  given  enough  time,  or  freedom  to 
hit  appropriate  targets.^''  Even  the  rapid  capitulation  of  Japan  following  the  atomic 
bombing  of  Hiroshima  and  Nagasaki  is  suspect.  How  much  was  Japan's  surrender  due 
to  its  loss  of  natural  resources  fi-om  the  submarine  campaign,  or  from  the  combined- 
services  island  hopping  campaigns  across  the  Pacific,  as  well  as  the  strategic  bombing 
campaign?  Unquestionably  the  shock  to  the  Japanese  as  they  faced  the  realities  of 
Hiroshima  and  Nagasaki  was  profound. Yet  today,  many  historians  agree  that  it  was 
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the  combination  of  factors,  and  the  inevitability  of  their  combined  outcomes,  not  the 
atomic  bombs  alone,  that  prompted  Japan's  surrender?''  Hiroshima  and  Nagasaki  were 
the  straws  that  broke  the  back  of  the  Japanese  camel  (big,  heavy  straws  though  they 
were). 

The  events  of  history  since  then  have  only  strengthened  the  argument. 

Conflicts  in  Korea,  Vietnam,  and  even  Desert  Storm  demonstrated  that  air  power  was 
essential  for  success  on  the  battlefield,  but  that  airpower  alone  did  not  bring  conflicts 
to  a  satisfactory  conclusion.  Airpower  can  set  the  stage  for  overwhelming  success  on 
the  battlefield,  yet  many  of  the  "centers  of  gravity"  chosen  for  strategic  bombing  have 
proven  elusive,  if  not  impossible  to  effectively  target.  The  most  elusive  of  all  strategic 
targets  has  been  the  will  of  the  political  leadership,  and  of  the  people  to  wage  war. 
Again,  history  has  indicated  that  "strategic"  aerial  bombardment  campaigns  against 
large,  predominantly  civilian  targets  may  fail  to  destroy  the  resolve  of  its  intended 
victims.^^  The  citizens  of  Great  Britain,  Germany,  Vietnam,  and  of  Baghdad  all 
provide  testimony  to  this  fact.  Humans  who  are  fighting  together  for  a  common  cause 
are  amazingly  resilient,  and  willing  to  undergo  incredible  hardship.  Typically,  they  are 
strangely,  even  perversely  bonded  when  confronted  with  a  common  enemy,  even  one 
from  the  skies.  They  may  become  effectively  helpless  and  defenseless,  but  they  are 
seldom,  if  ever,  less  defiant.  Even  Japan  was  ultimately  occupied  to  accomplish 
control  over  its  population.^®  Airpower  makes  stunning  victory  possible,  but  it  does 
not  achieve  victory  alone. 


16 


Today,  we  find  proponents  of  offensive  IW  espousing  theories  similar  to  those 
of  strategic  bombing  proponents.  "We  can  win  the  war  without  bloodshed"  is  a 
common  theme.  We  should  approach  these  claims  with  skeptical  caution;  A  common 
"nightmare  scenario"  in  popular  fiction  today  is  the  corruption  or  destruction  of  the 
New  York  Stock  Exchange  information  systems,^’  or  collapsing  the  banking  system  by 
bringing  down  a  major  bank.^*  Either  of  these  events  would  seriously  damage  the 
United  States,  but  would  they  bring  about  its  capitulation  in  a  dispute  over  a  vital 
national  interest?  Probably  not.  There  is  a  tendency  among  some  to  assume  that 
humans  cannot  survive  without  luxuries  once  they  have  become  accustomed  to  them. 
But  in  what  historical  example  has  this  ever  been  true? 

Information  warfare  will  be  a  key  component  of  future  conflicts,  just  as  the 
battle  for  air  superiority  has  become  a  key  component.  Both  offensive  and  defensive 
aspects  will  be  essential  for  success.  Successful  DIW  will  allow  combat  forces  to 
operate  without  crippling  disruption,  and  successful  OIW  will  allow  them  to  enjoy  the 
benefits  of  information  dominance:  to  see  the  battle  space  clearly,  while  enshrouding 
the  enemy  in  fog.  However,  neither  vision  nor  fog  win  or  lose  battles  alone.  Victory 
in  any  form  comes  from  the  innovative,  effective  application  of  combat  power.  Just 
as  airpower  has  become  an  indispensable  part  of  combat  power,  so  information 
warfare  is  becoming  an  integral  part  of  warfare  in  general.  We  are  expecting  far  too 
much,  however,  if  we  expect  IW  to  become  the  only  effective  means  of  warfare. 
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OPPORTUNITIES  AND  POTENTIAL  PITFALLS 


Information  Warfare  Across  the  Spectrum  of  Conflict 

A  unique  aspect  of  OIW  is  that  it  can  be  either  passive  (non-invasive)  or  active 
(invasive).  The  distinction  is  important.  Interception  of  electromagnetic  radiation  is  a 
passive  activity.  There  may  be  a  great  deal  of  effort  involved,  but  it  is  non-invasive. 
In  the  United  States  we  call  it  intelligence  gathering,  by  National  Technical  Means. 
Penetration  of  a  computer  or  computer  network,  on  the  other  hand,  is  invasive,  even  if 
the  pmpose,  once  penetration  is  accomplished,  is  merely  to  look  and  listen.  The  next 
step,  either  corruption  and  manipulation  of  data,  or  denial  of  service  is  not  only  active, 
it  is  destructive  and  provocative.  Consider  Figme  2.  Across  the  spectrum  of  conflict 
there  is  a  risk  to  payoff  ratio  that  should  be  considered.  During  peacetime,  the 
provocative  nature  of  disruptive  OIW  may  be  perceived  as  risky.  As  the  level  of 
conflict  escalates,  the  risk  to  benefit  ratio  rises,  and  OIW  can  increasingly  be  used  as  a 
tool  of  competition.  Indeed,  its  greatest  value  may  be  during  political/economic 
competition  and  transition  to  war.  But  this  increasing  value  holds  true  only  up  to  a 
point.  Effective  OIW  may  be  employed  in  lieu  of  armed  conflict,  or  as  an  adjunct 
supporting  other  activities  as  the  level  of  conflict  rises.  There  is  a  point  of 
diminishing  returns,  however,  as  the  level  of  conflict  escalates,  imtil  OIW  becomes  an 
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Figure  2  OIW  Applicability  and  Risk/  Benefit  Relationships 


insignificant  factor  in  comparison  to  the  physical  damage  accomplished.  It  becomes  a 
tricky,  and  tmpredictable  calculus.  Could  IW  assume  the  role  of  anti-war,  averting 
armed  conflict,  as  the  Tofflers  contend?^®  Or  would  invasive  OIW  prove  to  be  a  prod 
that  pushes  belligerents  from  peaceful  competition  to  open,  armed  conflict?  Opinions 
vary.  George  J.  Stein  argues  that  the  tmpredictable  effects  of  IW  gravitate  against  its 
use,  at  least  by  nation-states.^® 

Operations  Other  Than  War 

Information  Warfare,  in  the  form  of  a  purely  electronic  cyberwar  or  netwar, 
provides  the  potential  for  conducting  operations  against  an  adversary  that  may 
significantly  degrade  his  warmaking  potential.  These  operations  are  most  likely  to  be 
covert,  may  be  undetectable  to  an  adversary,  and  be  impossible  to  attribute  to  an 
opponent  even  if  they  are  detected.  Are  these  military  operations,  are  they 
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intelligence  operations,  or  are  they  something  else?  The  answer  is  neither  simple  or 
straightforward,  for  IW  is  in  fact  all  three. 

What  is  the  potential  for  IW  as  an  OOTW  when  employed  to  support  the 
national  interest?  The  potential  is  great  indeed.  Effective  OIW  operations  could 
permit  the  U.S.  to  predict,  with  near  certainty,  the  operations  of  an  adversary. 
Furthermore,  OIW  could  seriously  disable  the  combat  capabilities  of  an  adversary  by 
disrupting  C4I  (command,  control,  communication,  computers,  and  intelligence)  from 
top  to  bottom.  Preemptive  OIW  might  convince  an  enemy  to  forego  dangerous,  risky 
behavior,  by  destroying  his  confidence  in  his  own  systems  and  forces. 

What  is  the  potential  for  damage  to  the  national  interests  if  directed  against  the 
United  States?  Here  we  face  a  true  dilemma,  for  the  greater  we  leverage  our  own 
combat  capabilities  through  digitization  and  telecommunication,  the  more  we  are 
dependent  on  those  systems.  Consequently,  we  create  vulnerabilities  if  those  systems 
can  be  attacked.  The  need  for  robust  communications  becomes  obvious.  If  not 
sufficiently  robust  redundant,  telecommunications  could  easily  become  the  Achilles 
Heel  of  U.S.  forces.^' 

What  would  be  an  appropriate  response  to  an  IW  attack  on  interests  vital  to  the 
U.S.?  Certainly  a  response  in  kind  would  be  both  appropriate  and  convenient,  but  do 
nation-states  such  as  Libya  or  Iran  have  similar  vulnerabilities?  We  should  not  limit 
ourselves  to  response  in  kind,  but  consider  physical  attack  of  both  counterforce 
(military)  and  countervalue  (civilian  infrastructure)  targets  to  quickly  convince 
aggressors  that  such  adventurism  is  unprofitable. 
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Does  IW  Offer  Opportunities  for  Asymmetrical  Battle? 

Absolutely.  The  ideal  situation  for  any  commander  is  to  own  a  monopoly  on 
an  effective  weapon  against  which  an  adversary  has  little  or  no  defense.  History 
provides  several  examples:  the  tank,  the  submarine,  the  atomic  bomb,  the  sea- 
skimming  and  cruise  missiles.  Is  information  warfare  such  a  weapon?  From  the 
vantage  point  of  today,  we  must  conclude  that  it  is.  A  belligerent  that  cannot  trust  its 
knowledge  of  an  enemy  or  of  itself  is  virtually  helpless.  The  Persian  Gulf  War 
provides  convincing  evidence.  Coalition  forces  used  sea-,  air-,  land-,  and  space-based 
platforms  to  collect  information  about  the  Iraqis,  then  methodically,  violently  disrupted 
and  destroyed  the  C2  capability  of  the  Iraqi  war  machine.^^  Once  that  had  been 
accomplished,  the  destruction  of  the  forces  themselves  proved  to  be  relatively  easy 
and  inexpensive.  This  was  an  example  of  one  of  the  facets  of  asymmetric  battle.  It 
was  a  case  of  "high  tech"  versus  "medium  tech,"  and  high  tech  was  the  clear  victor. 
Colonel  Edward  Mann's  words  describe  the  situation  perfectly:  "Saddam  Hussein's 
industrial-era  armed  forces  ran  up  against  a  post-industrial  whirlwind.  It  is  ironic, 
yet  predictable,  that  the  most  disturbing  weapon  used  by  the  Iraqis  was  the  surface  to 
surface  ballistic  missile,  against  which  we  had  little  effective  counter.  The  Iraqis'  only 
success  was  this  asymmetric  attack. 

History  also  tells  us  that  monopolies  are  fleeting.  Does  the  U.S.  have  an 
effective  monopoly,  and  if  so,  how  long  will  the  monopoly  last?  In  its  ability  to 
physically  reach  out  and  destroy  critical  C2  facilities,  the  U.S.  currently  has  no  peer. 

In  warfare,  as  in  business,  one  must  never  rely  on  a  monopoly  alone  for  success. 


21 


because  monopolistic  conditions  do  not  prevail  indefinitely.  Furthermore,  response  in 
kind  may  not  be  the  response  to  fear.  Any  adversary  of  the  U.S.  would  have  to 
consider  very  carefully  its  objectives  in  opposing  the  U.S.  Could  it  use  IW  to 
sufficiently  impair  U.S.  response  capability,  so  that  its  limited  objectives  were  simply 
not  worth  the  trouble  to  oppose?  The  possibilities  could  be  tempting.  It  is  clear  from 
Iraq's  experience  that  direct  military  confrontation  of  the  U.S.  is  an  uninviting 
prospect.  How  might  an  adversary  use  IW  to  pursue  asymmetric  attack  of  US 
vulnerabilities  in  pursuit  of  limited  objectives?  Two  opportunities  for  strategic  and 
operational-level  "IW  fire  and  maneuver"  attack  against  the  United  States  seem  fairly 
clear.  First,  disrupt  US  communications,  as  discussed  in  "Operations  Other  Than  War" 
previously.  Second,  disrupt  the  ability  of  US  forces  to  deploy.  The  two  are  closely 
inter-related.  The  huge,  complex  process  of  deployment  is  dependent  on  commercial 
communication  and  transportation  systems  that  are  relatively  "soft"  targets.  Disruption 
of  commercial  communication  systems  and  the  transportation  infrastructure  supporting 
deployment  would  present  an  inviting  target. 

Who  Is  Most  Vulnerable? 

Without  an  effective  defense,  the  degree  of  vulnerability  to  IW  attack  is 
directly  proportional  to  the  leverage  gained  by  use  of  information  as  an  asset.  If 
information  technology  has  increased  a  belligerent's  capability  by  an  order  of 
magnitude,  then  successful  attack  of  that  technological  capability  can  degrade  by  an 
order  of  magnitude.  This  kind  of  math  can  either  tilt  or  level  a  playing  field  very 
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quickly.  At  present,  the  US  leads  the  pack.  It  has  been  the  most  successful  at 
employing  IW  in  support  of  conventional  warfare.  But  has  it  had  to  defend  against 
determined  IW  attack?  Apparently  not,  at  least  not  since  the  Vietnam  war.^'* 
Adversaries  have  either  failed  to  recognize  vulnerabilities,  or  have  been  imable  to 
attack  them.  Still,  unless  the  systems  that  create  information  dominance  are 
successfully  defended,  they  present  a  dangerous  vulnerability. 

Once  again,  there  is  an  opposite  side  of  this  coin.  One  IRA  bombing  attack  on 
the  financial  district  in  London  resulted  in  damages  of  $1  billion,  much  of  it  in  lost 
business,  rather  than  physical  damage.  This  is  an  excellent  example  of  low  tech 
applying  high  leverage  on  a  high  tech  system  with  an  asymmetrical  attack.^^ 

An  End  to  Bloodshed? 

Is  information  warfare  likely  to  become  a  replacement  for  the  bloody  combat 
•  man  has  known  throughout  his  existence?  Not  entirely,  but  perhaps  in  a  small  way. 
Here  is  where  the  distinction  between  cyberwar  and  netwar  is  significant.  Remember, 
cyberwar,  as  defined  by  Arquilla  and  Ronfeldt,  is  part  of  a  military  operation  with 
conventional  forces  and  battles,  while  netwar  is  IW  without  military  forces  or  battles. 
The  IW  conflict  may  become  primarily  a  "guerilla"  war  that  seldom,  if  ever,  achieves 
nation  versus  nation  emphasis.  Nation-states  may  be  reluctant  to  use  this  weapon  in 
lieu  of  conflict  because  of  the  likelihood  of  "real"  (physical)  retaliation,  at  least  if  they 
believe  their  actions  can  be  traced.^**  That  leaves  the  actors  who  are  not  nation-states 
as  likely  aggressors,  at  least  in  the  "war  vdthout  bloodshed,"  or  netwar.  The 
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possibility  of  netwar  as  cyber-terrorism  is  genuine.  The  technique  has  real  advantages, 
as  a  successful  attack  could  be  extremely  disruptive,  demonstrating  the  powerlessness 
of  a  government,  while  avoiding  the  negative  backlash  that  results  from  apparently 
ruthless  killing.  Additionally,  IW  (cyberwar)  is  likely  to  be  conducted  as  a  prelude  to 
war,  to  set  favorable  preconditions  for  conflict. 

IW  could  be  perceived  as  an  attractive  alternative  to  conventional  warfare.  Just 
the  same,  we  cannot  escape  the  conclusion  that  physical  violence  or  the  threat  of 
physical  violence  will  remain  the  ultimate  means  of  coercion.^^ 

The  Problem  of  Battle  Damage  Assessment 

Theoretically,  if  you  can  functionally  destroy  or  sufficiently  disrupt  command, 
control,  and  communications,  physical  destruction  of  C3  assets  will  be  unnecessary. 
Furthermore,  if  you  can  sever  the  head  from  the  arms  by  isolating  the  leadership  from 
its  armed  forces,  you  may  obviate  the  need  to  engage  the  enemy's  armed  forces  in 
"real"  combat  at  all.  Unfortunately,  IW  battle  damage  assessment  is  even  less  well 
developed  than  IW  itself.  The  problem  is  obvious.  We  have  developed  the  tools  and 
techniques  to  assess  physical  damage  quite  well,  but  a  "soft  kill"  is  generally 
indistinguishable  from  a  "miss."  The  experience  with  Iraqi  power  distribution  stations 
is  an  excellent  example.  The  carbon  fiber  filaments  from  the  Tomahawk  "Kit  2" 
warheads  shorted  Iraqi  power  grid  systems  so  badly,  they  fused  generators,  but 
because  the  damage  was  not  visible,  they  were  hit  again  with  iron  bombs,  "just  to 
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make  sure."^*  It  is  very  likely  that  IW  experience  will  be  very  similar.  Even  if  we 
achieve  OIW  successes,  they  are  likely  to  be  followed  up  with  hard  target  kills. 
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CONCLUSIONS  AND  CAVEATS:  FEASIBILITY  AND  DESIRABILITY 


Conclusions 

Piercing  the  fog  of  war  has  been  a  goal  of  military  leaders,  since  the  time  of 
Sim  Tzu.  The  capabilities  of  modem  digital  technology  and  communication  bring  both 
extraordinary  opportunities  and  dangers.  We  can  see  the  potential  to  "read  the  enemy 
like  an  open  book."  At  the  same  time,  we  may  be  able  to  confound  the  enemy  by 
destroying  or  disrupting  his  own  information  systems.  In  so  doing,  we  can  increase 
his  friction  and  thicken  the  fog  of  war  imtil  it  is  virtually  impenetrable.  From  this 
perspective,  offensive  IW  is  both  feasible  and  desirable. 

The  information  revolution  presents  a  two-edged  sword,  however.  As  our 
capability  is  leveraged  by  information  technology,  so  is  our  vulnerability  to  disruption. 
While  the  same  is  tme  for  an  enemy,  one  message  should  ring  loud  and  clear  - 
defense  of  our  OAvn  information  systems  is  even  more  important  than  the  disruption  or 
destmction  of  an  enemy's.  Defensive  IW  may  not  seem  terribly  appealing,  but  its 
effects  are  desirable,  and  it  is  not  only  feasible,  it  is  absolutely  essential. 


Caveats 


We  must  not  overlook  the  fact  that  one  who  is  not  dependent  on  a  digital 
information  architecture  may  be  relatively  invulnerable  to  offensive  information 
operations.  Consequently,  there  are  conceivable  situations  in  which  OIW  is  not 
particularly  feasible.  We  need  to  remember  that  fact,  lest  we  find  ourselves  expecting 
IW  to  accomplish  effects  against  an  enemy  that  simply  isn't  vulnerable. 

While  the  opportunities  for  synergy  and  high  payoff  are  great  in  offensive 
information  warfare,  the  penalties  for  neglecting  defensive  information  warfare  are 
even  greater.  The  United  States  military  leads  the  world  in  digitization  of  information 
systems,  and  has  achieved  this  preeminence  at  great  expense.  Attention  to  defense  of 
this  capability  is  imperative,  to  defend  both  the  capability  and  the  investment  made  to 
create  the  capability.  Neglect  of  IW  defense  could  lead  to  an  information  equivalent 
of  Pearl  Harbor.  No  form  of  warfare  is  desirable  to  the  one  who  finds  himself  on  the 
losing  side,  experiencing  catastrophe. 

Finally,  we  must  be  careful  not  to  expect  too  much  of  this  new  weapon  of 
warfare.  Information  warfare  will  not  be  the  answer  to  every  challenge.  Experience 
has  taught  us,  for  example,  that  strategic  bombing  does  not  win  wars  by  itself.  It  sets 
the  stage,  and  prepares  the  battlefield  for  extraordinary  success  of  groimd  forces, 
contributing  enormously  to  synergy.  As  such,  it  is  an  indispensable  part  of  the  US 
military  repertoire.  But  there  are  limits  to  the  ends  that  can  be  accomplished  through 
aerial  bombardment.  Just  as  strategic  aerial  bombardment  has  become  a  powerful  tool, 
but  not  a  panacea  or  end  to  conventional  combat,  so  information  warfare  is  likely  to 
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become  an  indispensable  tool  when  used  appropriately  against  an  enemy's 
vulnerability.  While  we  may  conclude  that  information  warfare  is  both  feasible,  and 
preferable  to  "traditional"  combat,  we  must  remember  the  warning  of  Carl  von 
Clausewitz,  against  concluding  that  successful  maneuver  is  the  object  of  battle.  It  is 
battle  that  is  the  object  of  maneuver,  and  bloody  combat  is  the  "cash  transaction"  of 
war.  If  we  expect  IW  to  entirely  replace  "old  fashioned"  combat,  we  are  sure  to  be 
painfully  disappointed,  and  shocked  by  the  price  of  the  cash  transaction. 
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